Dotaz: Ettercap a ssl

[Radek]

Dobrý den, máte někdo zkušenosti s ettercapem???
Vše mi funguje dobře kromě ssl. Ne jen že ssl komunikaci nerozlouskne,ale při vypnutí nahlásí tyto chyby:

ettercap NG-0.7.3 copyright 2001-2004 ALoR & NaGA

iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.
iptables v1.3.8: can't initialize iptables table `nat': Permission denied (you must be root)
Perhaps iptables or your kernel needs to be upgraded.

Při tom ho jako root spouštím... Ještě přihodím kus etter.conf

#
# This section includes all the configurations that needs a string as a
# parmeter such as the redirect command for SSL mitm attack.
#
[strings]

# the default encoding to be used for the UTF-8 visualization
utf8_encoding = "ISO-8859-1"

# the command used by the remote_browser plugin
remote_browser = "mozilla -remote openurl(http://%host%url)"


#####################################
#       redir_command_on/off
#####################################
# you must provide a valid script for your operating system in order to have
# the SSL dissection available
# note that the cleanup script is executed without enough privileges (because
# they are dropped on startup). so you have to either: provide a setuid program
# or set the ec_uid to 0, in order to be sure the cleanup script will be
# executed properly
# NOTE: this script is executed with an execve(), so you can't use pipes or
# output redirection as if you were in a shell. We suggest you to make a script if
# you need those commands.

#---------------
#     Linux 
#---------------

# if you use ipchains:
   #redir_command_on = "ipchains -A input -i %iface -p tcp -s 0/0 -d 0/0 %port -j REDIRECT %rport"
   #redir_command_off = "ipchains -D input -i %iface -p tcp -s 0/0 -d 0/0 %port -j REDIRECT %rport"

# if you use iptables:
   redir_command_on = "iptables -t nat -A PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"
   redir_command_off = "iptables -t nat -D PREROUTING -i %iface -p tcp --dport %port -j REDIRECT --to-port %rport"

Googloval jsem jako o život a na stejné chyby jsem v pár diskuzích narazil, ale žádné kloudné řešení jsem z toho nevypátral.

Diky za každou radu

Radek

Odpovědi

[Jiří J.]

Zápis do nat table klasicky "ručně" přes iptables funguje?
S ettercapem jsem si kdysi hrál, SSL nerozchodil, tuším, že jsem tehdy použil ručně něco jako dsniff, proxy a dns request spoofer zvlášť (+ ip_forward)

[Radek]

Ano zápis ručne funguje.....
Už jsem na to přišel takovou školáckou chybu ...špatně jsem si přečetl config

[privs]
ec_uid = 65534                # nobody is the default
ec_gid = 65534                # nobody is the default

Stačilo přepsat

ec_uid = 0

Každopádně ssl stále nerozluští, tak nevím kde by ještě mol být problém...
Má někdo ettercap pro ssh1 a https funkční???

[Lukis]

hej muzete mi nekdo poradit jaxtim mam pracovat s tim ettercapem prosim??moje icq 216042326...kdybyste byl někdo tak hodný a napsal mi co a jak:)...